Contract source triage
Track source provenance, compiler context and hashes. Review leads around external calls, unchecked arithmetic, narrowing casts, amount precision and assembly operations.
Prepare a requestMonitoring and triage for public EVM deployments and authorized source code. Discover, organize and review evidence without presenting rule matches as proven vulnerabilities.
Local tooling implemented · Portal execution pendingTrack source provenance, compiler context and hashes. Review leads around external calls, unchecked arithmetic, narrowing casts, amount precision and assembly operations.
Prepare a requestMonitor new blocks and direct deployments. Add configured factory events and CREATE/CREATE2 traces, backfill from cursors, and queue addresses, bytecode and source for review.
Define monitoring scopeBase/BSC block monitoring, chain ID validation, reconnection and cursor backfills. Internal deployment coverage depends on node traces and configured events.
Use Sourcify / Etherscan V2 where configured, or local authorized source. SHA256 content hashes support incremental analysis.
Report rule locations, triggers, context limits and manual review steps. Check proxy and implementation separately; missing source precludes a completed source review.
Start with local developer tools and reproducible guides. For your own Solidity source, explore the separate EvidentChain review workspace.